No commits on GitHub since 2022, the slack channel is dead silent, and it seems everyone here recommends deps.edn. Is Leiningen worth using in 2023 or should I jump ship?

  • alexdmiller@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    11 months ago

    You interpreted my response correctly at the time … my mind was changed. :)

    Nobody anywhere checks the signature (and if you try using the tools provided, you’ll find out why), so signatures are largely security theater in maven world. This is bad, and we should do better. Hoping to eventually have time to work more on this, and have had some sidebars with Phil H about it.